Open to opportunities

karim hassan

@karimhassan

Security researcher and bug hunter delivering high-impact vulnerability discoveries through rigorous web and AI testing.

Egypt

Message

What I'm looking for

I’m looking to continue independent, high-impact vulnerability research—especially web and AI security—where my work is taken seriously. I want teams that value clear reproduction steps, fast remediation, and responsible reporting.

I’m a Security Researcher with 2 years of experience identifying high-impact vulnerabilities through independent bug hunting. I focus on analyzing technical risks and showing how issues can translate into real, service-wide disruption.

For the past 2 years, I’ve conducted continuous security assessments on web applications and infrastructure, including finding and exploiting Full SSRF that enabled internal request forgery and could stop all website services. I’ve also discovered Broken Access Control flaws, researched Prompt Injection attacks against ai agents to bypass security guardrails, and detected Race Condition vulnerabilities that expose critical concurrency problems.

I document and report findings with clear reproduction steps and impact assessments, including both Valid and Duplicate findings. My goal is to help teams reduce exposure by turning technical discoveries into actionable remediation.

Experience

Work history, roles, and key accomplishments

Current

Security Researcher & Bug Hunter

Current

HackerOne

Jan 2023 - Present (3 years 5 months)

Conducted two years of continuous bug hunting on web applications and infrastructure, identifying Full SSRF and Broken Access Control flaws that enabled service disruption and unauthorized access to restricted functionality. Reported XSS/HTML injection issues and researched prompt injection, race conditions, and DoS risks with detailed reproduction steps for valid and duplicate findings.

SSRF XSS HTML Injection Race Condition Testing Repro Steps Denial Of Service (DOS)